Privacy Policy

Train With Gray is an online fat loss coaching business run by Daniel Gray in the United Kingdom. I am the "data controller" for the personal information described in this policy, which means I decide how and why it is used. Contact me about anything in this policy at: trainwithgray.com This policy applies to my website, trainwithgray.com, and to the coaching I provide.

When you fill in the contact form or message me: • Your name, email address and phone number • Your Instagram handle, if you choose to give it • Anything you tell me about your goals and what you have tried before If you become a client, I may also collect: • Your age, height, weight, measurements and progress photos • Your food preferences, eating habits, schedule and training experience • The equipment you have access to • Health information, such as injuries or medical conditions, if you choose to share it • Your check-in updates and messages to me • Payment details and records of what you have paid (card details are handled by the payment provider, not stored by me) Automatically, when you visit my website: • Technical information such as your IP address, browser type and the pages you visit

Some of the information you share with me, such as injuries, medical conditions or details about your body, counts as "special category" (health) data and gets extra protection under UK data protection law. I only collect this kind of information if you choose to give it to me, and I use it only to build a safe and suitable plan for you. I rely on your explicit consent to do this. You can withdraw your consent at any time by contacting me, though I may then be unable to continue coaching you safely. I am not a medical professional. If you have a medical condition, please check with your GP before changing your diet or exercise.

• Reply to your enquiry and discuss coaching — Steps you ask me to take before entering a contract; my legitimate interest in answering enquiries • Create and deliver your meal plan and training programme, run check-ins and support you — To carry out my contract with you • Use your health information to keep your plan safe and suitable — Your explicit consent • Take payment and keep financial records — To carry out my contract with you; legal obligation (tax and accounting) • Send you marketing emails or messages about my services — Your consent. You can opt out at any time • Keep my website secure and understand how it is used — My legitimate interest in running a safe, effective business • Handle complaints or legal claims — My legitimate interest; legal obligation I do not sell your personal information, and I do not use it to make automated decisions about you. Your plan is written by me personally.

I only share information with people and services that help me run the business, and only as much as is needed. These may include: • My website host and website builder • The form or email service used to receive your messages • Messaging platforms I use to speak with you, such as Instagram or WhatsApp • The app or platform I use to deliver plans and check-ins • Payment providers • Accounting software and my accountant • My professional insurer or advisers, if needed for a claim or legal matter I may also share information if the law requires it, for example if a court or regulator asks me to.

Some of the services I use may store or process information outside the UK. Where that happens, I make sure appropriate safeguards are in place, such as the UK's approved data transfer agreements or a country the UK government recognises as providing adequate protection.

• Enquiries that do not become clients: deleted after 12 months • Client coaching records, including health information and progress photos: kept while we work together, and deleted within 12 months after coaching ends, unless you ask me to delete them sooner • Invoices and payment records: kept for as long as UK tax law requires, usually at least six years • Marketing consent: kept until you unsubscribe

I use sensible measures to keep your information secure, including password-protected accounts and limiting access to me and the services listed above. No online system is completely secure, so I cannot guarantee absolute security, but I take care with the information you trust me with.

My website does not use cookies for tracking or advertising.

Under UK data protection law, you have the right to: • Be informed about how your information is used (this policy) • Access the information I hold about you • Correct information that is wrong or incomplete • Erase your information in certain circumstances • Restrict how I use your information in certain circumstances • Object to me using your information based on my legitimate interests • Data portability, meaning a copy of information you gave me in a commonly used format • Withdraw consent at any time, where I rely on your consent To use any of these rights, contact me via the form at trainwithgray.com. I will usually reply within one month.

My services are for people aged 18 and over. I do not knowingly collect information from anyone under 18. If you believe I have, please contact me and I will delete it.

If you are unhappy with how I have handled your information, please contact me first and I will do my best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or by calling 0303 123 1113.

I may update this policy from time to time. The "last updated" date at the top shows when it was last changed. If I make a significant change, I will let you know in a suitable way, such as a notice on my website or an email to clients.